Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
File: 2KqsBZlqW0YUxu7a_-f49fmivGc.mft (raw, json)
Hash identifier: 8SOUVWOQ6T07zHPX2lz0sAGCOjqyg84XyvlW3I2m2m0=
Subject key identifier: E2:B7:09:71:71:9D:12:66:F7:F7:C4:5B:50:27:3C:15:59:14:A6:C6
Authority key identifier: D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
Certificate issuer: /CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Certificate serial: 01A1453B1C635C4F97DC865DCE40EE6990B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
Manifest number: 1AAC
Signing time: Fri 16 Oct 2026 15:01:03 +0000
Manifest this update: Fri 16 Oct 2026 15:01:03 +0000
Manifest next update: Sat 17 Oct 2026 15:01:03 +0000
Files and hashes: 1: 2KqsBZlqW0YUxu7a_-f49fmivGc.crl (hash: gNlNnHAZ6rAOd4mtZ9ZgxVI2EaAFY5j6/GavuW+lSfY=)
2: vM4pcQR4cpfxqBvoAa4ezpfAooA.roa (hash: q37j9EaxOdTgZgbNR9N/Sjv4ip1H9vll46kAjU29riM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:3b:1c:63:5c:4f:97:dc:86:5d:ce:40:ee:69:90:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8aaac05996a5b4614c6eedaffe7f8f5f9a2bc67
Validity
Not Before: Oct 16 15:01:03 2026 GMT
Not After : Oct 17 15:01:03 2026 GMT
Subject: CN=e2b70971719d1266f7f7c45b50273c155914a6c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f5:26:b4:91:b7:26:cf:65:10:a9:73:92:da:
ec:e1:4f:a9:9b:a0:a5:8e:6c:21:d2:dc:44:b4:96:
75:12:e7:d9:a7:dc:b8:ec:42:af:08:1e:e8:ec:f3:
d8:42:3e:62:5f:43:24:00:4d:76:7c:5b:61:1e:6e:
03:85:95:7c:5e:54:06:25:5e:85:78:87:a3:fc:d9:
ae:a1:bd:23:93:6f:ae:87:6a:e2:5c:81:ce:5e:11:
5d:f8:ec:4d:19:bf:91:5b:55:3e:3e:b3:0a:14:22:
b2:d0:2b:56:29:d5:cc:40:4c:8d:93:0e:86:d4:3b:
4e:2b:c7:29:be:e8:f8:ff:28:6a:7b:02:1a:47:f6:
b4:28:4c:23:2c:bb:19:f3:56:6c:fc:9a:da:f6:52:
b3:92:c3:ce:86:e9:89:78:62:a0:e7:7f:74:53:0a:
0f:6d:99:49:3a:e5:22:aa:3d:cd:48:17:6c:cf:71:
e6:35:dc:b5:d4:eb:0f:af:f1:43:e9:71:9c:e2:59:
66:a1:e2:e6:a2:72:d0:49:5c:64:4c:bd:8b:32:a1:
e8:df:89:70:5e:24:87:ba:c4:53:06:ed:35:e5:9d:
9a:5c:c9:f1:e0:8a:cd:56:7a:39:e5:ba:e6:4b:f4:
68:2d:8e:f3:22:47:f6:e9:03:34:8a:63:10:bb:c1:
9e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B7:09:71:71:9D:12:66:F7:F7:C4:5B:50:27:3C:15:59:14:A6:C6
X509v3 Authority Key Identifier:
keyid:D8:AA:AC:05:99:6A:5B:46:14:C6:EE:DA:FF:E7:F8:F5:F9:A2:BC:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KqsBZlqW0YUxu7a_-f49fmivGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/938430-07b4-45b3-9496-f53ee32ed816/1/2KqsBZlqW0YUxu7a_-f49fmivGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:49:70:78:89:da:36:b5:a6:59:cd:cd:03:71:e6:e4:b9:ce:
39:b3:8a:e1:7e:a4:f7:b7:64:37:db:8b:79:ae:32:aa:96:b3:
ef:28:17:a2:ed:42:dc:a0:f7:a9:70:a3:d2:a9:f9:76:2e:76:
d7:c0:6c:79:04:f9:30:6c:e2:83:ea:bf:31:00:a0:47:26:78:
b9:65:85:30:75:ca:0e:2f:a5:d0:e6:4f:ea:08:9e:06:c9:41:
23:09:8d:de:6e:9e:32:d2:da:d1:1c:86:0b:10:eb:47:3c:30:
94:50:3c:11:78:a4:ed:16:06:35:42:d6:33:50:02:ff:c3:d1:
45:57:e7:e5:70:18:17:49:e1:78:58:67:86:97:ce:f5:07:78:
2f:bf:c2:96:9b:da:ea:c7:c3:1f:bc:e2:0e:6f:11:06:5d:25:
b5:1c:3f:f4:e4:3c:f7:7d:e4:e1:35:e0:ea:4a:64:f9:23:d1:
73:57:ad:d9:d7:2e:8b:9f:a9:b3:14:56:0a:99:2e:4b:0e:87:
de:cd:7c:16:75:2c:31:ca:6b:25:b9:9b:e3:4a:50:f5:a9:0e:
c4:3f:e2:06:64:42:76:7f:12:7c:be:52:a2:11:10:eb:96:fd:
0d:cd:6a:53:5a:6b:65:9d:51:0d:c1:9f:37:c0:d7:eb:f0:9b:
be:a0:49:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 20:56:22 2026 by rpki-client